CVE-2013-10070
CRITICALPHP-Charts 1.0 - Unauthenticated Remote Code Execution via GET Parameter Eval Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-10070.
PoCs published by Metasploit, AkaStep, AkaStep, bcoles, including Metasploit module exploits/unix/webapp/php_charts_exec.
AI-analyzed exploit summary This Metasploit module exploits a PHP code execution vulnerability in php-Charts v1.0 by injecting arbitrary PHP code via the 'url.php' script, which uses eval() on user-controlled HTTP GET parameters. The exploit sends a base64-encoded payload to achieve remote command execution.
Description
PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution under the web server's context. The vulnerability allows unauthenticated attackers to execute system-level commands via base64-encoded payloads embedded in parameter names, leading to full compromise of the host system.
Exploits (3)
This Metasploit module exploits a PHP code execution vulnerability in php-Charts v1.0 by injecting arbitrary PHP code via the 'url.php' script, which uses eval() on user-controlled HTTP GET parameters. The exploit sends a base64-encoded payload to achieve remote command execution.
This exploit demonstrates PHP code execution in php-chart_v1.0 via unsafe use of eval() on user-controlled input. The vulnerability allows arbitrary code execution by injecting PHP code into GET parameters, which are then evaluated.
This Metasploit module exploits a PHP code execution vulnerability in php-Charts v1.0 by injecting arbitrary PHP code via the 'url.php' script, which calls eval() with user-controlled data from HTTP GET parameters. The exploit sends a base64-encoded payload that is decoded and executed on the target system.
References (5)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H